This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa
File:                     3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa (raw, json)
Hash identifier:          j9tkt0Rs2SGOUGDOSgDpiW30Wa8MO/2ICYCNtTdYE5M=
Subject key identifier:   1C:2D:3B:18:EA:C7:0D:64:CB:AD:6C:C9:1C:8D:BF:D1:AB:C2:1D:00
Certificate issuer:       /CN=58BE63EBAC9B3F4C98BFAAE0519E6C37BD0CE248
Certificate serial:       0ED34B08E647579D22AFF8AA3892DA550F398E7E
Authority key identifier: 58:BE:63:EB:AC:9B:3F:4C:98:BF:AA:E0:51:9E:6C:37:BD:0C:E2:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BE63EBAC9B3F4C98BFAAE0519E6C37BD0CE248.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa
Signing time:             Fri 05 Dec 2025 13:00:29 +0000
ROA not before:           Fri 05 Dec 2025 12:55:29 +0000
ROA not after:            Fri 04 Dec 2026 13:00:29 +0000
asID:                     271145
IP address blocks:        201.71.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/58BE63EBAC9B3F4C98BFAAE0519E6C37BD0CE248.crl
                          rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/58BE63EBAC9B3F4C98BFAAE0519E6C37BD0CE248.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BE63EBAC9B3F4C98BFAAE0519E6C37BD0CE248.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d3:4b:08:e6:47:57:9d:22:af:f8:aa:38:92:da:55:0f:39:8e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BE63EBAC9B3F4C98BFAAE0519E6C37BD0CE248
        Validity
            Not Before: Dec  5 12:55:29 2025 GMT
            Not After : Dec  4 13:00:29 2026 GMT
        Subject: CN=1C2D3B18EAC70D64CBAD6CC91C8DBFD1ABC21D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:86:dd:56:89:a3:3c:ed:58:98:9e:4e:b9:
                    a5:c0:b8:4c:94:fd:e6:f4:08:4b:92:d8:fe:8c:a7:
                    a3:4a:e7:ff:bb:32:9a:06:08:4b:28:35:c4:7b:26:
                    c6:cf:72:d8:ad:8b:93:5e:cd:cd:7c:a0:08:d9:8c:
                    88:7e:26:d1:05:02:03:da:05:4e:b3:b6:2f:8a:a7:
                    4b:fd:48:5e:e4:75:27:b9:b6:74:8e:ff:5d:3e:1f:
                    2c:27:cc:ab:1a:4b:97:f3:d8:b8:ef:a6:79:21:6c:
                    56:8e:1b:41:86:18:d3:f5:ca:47:c6:d4:82:fd:22:
                    7e:52:ff:42:fd:9e:75:9e:eb:e0:59:bc:4b:c0:38:
                    47:4d:98:c6:2c:10:58:43:b8:90:9b:59:89:ba:2d:
                    06:f5:de:eb:d7:90:11:72:74:38:17:1e:78:e0:0e:
                    e6:e2:67:69:cb:36:97:40:35:48:9c:4c:e0:c7:eb:
                    8c:11:a4:e1:4c:e6:48:f8:00:67:d5:d5:70:35:83:
                    d4:f0:5b:62:5c:2e:a1:54:08:0d:b4:5e:6b:aa:04:
                    a9:e8:f8:2b:b3:73:7e:13:0f:21:8d:f1:f8:a9:0c:
                    84:78:ce:48:de:a8:c3:fb:15:67:25:55:f2:0c:fe:
                    b6:ba:c0:c7:ea:ce:e9:09:33:9b:85:6b:d6:c1:bf:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2D:3B:18:EA:C7:0D:64:CB:AD:6C:C9:1C:8D:BF:D1:AB:C2:1D:00
            X509v3 Authority Key Identifier:
                keyid:58:BE:63:EB:AC:9B:3F:4C:98:BF:AA:E0:51:9E:6C:37:BD:0C:E2:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/58BE63EBAC9B3F4C98BFAAE0519E6C37BD0CE248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BE63EBAC9B3F4C98BFAAE0519E6C37BD0CE248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:c9:f2:c6:ca:dd:cd:d9:fb:c2:34:80:00:10:0f:0c:e8:
         da:e2:11:41:1b:14:9e:e9:2c:74:8a:8f:3c:c0:bb:b9:8c:77:
         2d:b2:10:6b:82:42:68:d2:85:f9:2c:54:c4:95:a8:37:bf:b0:
         57:0b:b7:12:d5:6c:9a:32:b7:1f:53:90:d5:06:92:57:08:6e:
         28:5b:66:74:4d:ef:4e:8d:fc:fa:0a:5c:89:58:91:24:a0:8c:
         59:18:98:8e:7e:27:72:be:bd:5a:95:ac:41:94:d7:b9:0f:0e:
         16:74:80:3a:be:74:85:14:4e:d9:a3:d6:d7:b1:85:fe:a5:03:
         2f:96:86:e2:16:73:38:fc:de:e3:b8:30:72:6b:d9:6c:db:12:
         df:4c:f1:0d:04:14:2d:29:a8:08:30:30:7d:55:6b:02:df:1c:
         ce:95:61:3d:44:0e:3e:e8:e0:43:a6:19:8d:56:18:98:cf:ab:
         7c:b7:3d:e2:0f:0b:24:a2:49:f5:db:b2:45:5e:f3:bc:0e:5c:
         05:7d:ca:ab:67:f7:dd:87:47:de:b2:b9:52:c9:03:a6:d1:a0:
         63:71:96:b3:ba:85:2b:14:f9:cc:e4:1b:73:d7:fc:63:db:7c:
         9b:0e:3b:55:82:f3:12:9e:2a:2c:92:3a:0a:2c:24:6b:9b:c2:
         80:f7:be:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDtNLCOZHV50ir/iqOJLaVQ85jn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThCRTYzRUJBQzlCM0Y0Qzk4QkZBQUUwNTE5RTZDMzdC
RDBDRTI0ODAeFw0yNTEyMDUxMjU1MjlaFw0yNjEyMDQxMzAwMjlaMDMxMTAvBgNV
BAMTKDFDMkQzQjE4RUFDNzBENjRDQkFENkNDOTFDOERCRkQxQUJDMjFEMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0YbdVomjPO1YmJ5OuaXAuEyU
/eb0CEuS2P6Mp6NK5/+7MpoGCEsoNcR7JsbPctiti5Nezc18oAjZjIh+JtEFAgPa
BU6zti+Kp0v9SF7kdSe5tnSO/10+HywnzKsaS5fz2LjvpnkhbFaOG0GGGNP1ykfG
1IL9In5S/0L9nnWe6+BZvEvAOEdNmMYsEFhDuJCbWYm6LQb13uvXkBFydDgXHnjg
DubiZ2nLNpdANUicTODH64wRpOFM5kj4AGfV1XA1g9TwW2JcLqFUCA20XmuqBKno
+Cuzc34TDyGN8fipDIR4zkjeqMP7FWclVfIM/ra6wMfqzukJM5uFa9bBvxRLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHC07GOrHDWTLrWzJHI2/0avCHQAwHwYDVR0j
BBgwFoAUWL5j66ybP0yYv6rgUZ5sN70M4kgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzNDdEJ2c3NlOXpvd0pyUW9WcFVVREpnd3Z6NFgxMVByVXZmbzYxM2ZQ
OFYvMC81OEJFNjNFQkFDOUIzRjRDOThCRkFBRTA1MTlFNkMzN0JEMENFMjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4QkU2M0VCQUM5QjNGNEM5
OEJGQUFFMDUxOUU2QzM3QkQwQ0UyNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMzQ3RCdnNzZTl6b3dKclFvVnBVVURKZ3d2ejRYMTFQclV2Zm82MTNmUDhWLzAv
MzIzMDMxMmUzNzMxMmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJR9gwDQYJKoZIhvcNAQELBQADggEBABm0yfLG
yt3N2fvCNIAAEA8M6NriEUEbFJ7pLHSKjzzAu7mMdy2yEGuCQmjShfksVMSVqDe/
sFcLtxLVbJoytx9TkNUGklcIbihbZnRN706N/PoKXIlYkSSgjFkYmI5+J3K+vVqV
rEGU17kPDhZ0gDq+dIUUTtmj1texhf6lAy+WhuIWczj83uO4MHJr2WzbEt9M8Q0E
FC0pqAgwMH1VawLfHM6VYT1EDj7o4EOmGY1WGJjPq3y3PeIPCySiSfXbskVe87wO
XAV9yqtn992HR96yuVLJA6bRoGNxlrO6hSsU+czkG3PX/GPbfJsOO1WC8xKeKiyS
OgosJGubwoD3vjk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:24 2025 by rpki-client